Institutional Influences on Information Systems Security Innovations.

Author List: Hsu, Carol; Lee, Jae-Nam; Straub, Detmar W.;
Information Systems Research, 2012, Volume 23, Issue 3, Page 918-939.
This research investigates information security management as an administrative innovation. Although a number of institutional theories deal with information systems (IS) innovation in organizations, most of these institutional-centered frameworks overlook external economic efficiency and internal organizational capability in the presence of pressures of institutional conformity. Using Korea as the institutional setting, our research model posits that economic-based consideration will moderate the institutional conformity pressure on information security adoption while organization capability will influence the institutional confirmation of information security assimilation. The model is empirically tested using two-stage survey data from a field study of 140 organizations in Korea. The results indicate that in addition to institutional influences, our six proposed economic-based and organizational capability moderating variables all have significant influences on the degree of the adoption and assimilation of information security management. We conclude with implications for research in the area of organizational theory and the information security management literature, and for practices regarding how managers can factor into their information security planning the key implementation variables discovered in this study. The robust setting of the study in Korean firms allows us to generalize the theory to a new context and across cultures.
Keywords: administrative innovation; adoption and assimilation; economic; information security management; institutional theories; IT capability factors; organizational
Algorithm:

List of Topics

#108 0.161 model research data results study using theoretical influence findings theory support implications test collected tested based empirical empirically context paper
#24 0.138 institutional pressures logic theory normative embedded context incumbent contexts forces inertia institutionalized environment pressure identify mimetic dominant coupling board newly
#35 0.130 technology organizational information organizations organization new work perspective innovation processes used technological understanding technologies transformation consequences perspectives use administrative economic
#213 0.095 assimilation beliefs belief confirmation aggregation initial investigate observed robust particular comparative circumstances aggregated tendency factors examine stages uncertainty instead confidence
#186 0.082 security information compliance policy organizations breach disclosure policies deterrence breaches incidents results study abuse managed isp violations based comply protection
#252 0.073 management practices technology information organizations organizational steering role fashion effective survey companies firms set planning focus committees executives managing committee
#198 0.071 factors success information critical management implementation study factor successful systems support quality variables related results key model csf importance determinants
#59 0.064 capabilities capability firm firms performance resources business information technology firm's resource-based competitive it-enabled view study value infrastructure results organizational model
#173 0.062 effect impact affect results positive effects direct findings influence important positively model data suggest test factors negative affects significant relationship